Attestation¶
Core Idea¶
A verifiable, principal-binding, tamper-evident mark applied to a specific artifact, such that a third party can later confirm — without trusting the signer or the holder — who committed to what, and that the artifact is unaltered since the mark was applied.
How would you explain it like I'm…
The Wax Seal
A wax seal stamped on a letter shows who sent it and proves nobody opened it on the way. If someone breaks the seal, you can tell right away. So even a stranger can trust the letter without knowing the person who sent it.
The Unfakeable Mark
Attestation is putting a special, hard-to-fake mark on something so that later, anyone can check three things at once: who promised it, what they promised, and that it hasn't been changed since. A wax seal, a signature with a witness, a hallmark stamped into gold, or a digital signature all do this. The clever part is that you don't have to trust the person who made the mark or the person holding it — you check the mark itself against something everyone agrees on, like a known stamp or key. If the thing was altered after the mark went on, the check fails and you can see it.
Tamper-Evident Binding
Attestation is the pattern where a verifiable, identity-binding, tamper-evident mark is applied to an artifact, so that a third party can later confirm — without trusting the signer or the holder — who committed to what, and that the artifact hasn't been altered since the mark was applied. The defining commitment is binding an identity to a specific artifact in a way that travels: the marked artifact can move across owners, time, and contexts, and the mark stays checkable against a publicly known trust anchor. Three guarantees ride along with every attestation. Authenticity: only the bound party could have produced this mark for this artifact (or forging it is detectably hard). Integrity: any change to the artifact after marking is detectable by checking the mark against it. And public verifiability: anyone with the artifact, the mark, and the trust anchor can verify the binding without trusting the signer or receiver. It's substrate-independent — wax seals, hallmarks, audit opinions, and digital signatures are all the same shape.
Attestation is the structural pattern by which a verifiable, principal-binding, tamper-evident mark is applied to an artifact, such that a third party can later confirm — without trusting the signer or the holder — three things at once: who committed to what, and that the artifact has not been altered since the mark was applied. The defining structural commitment is the binding of an identity to a specific artifact in a way that travels: the artifact carrying its mark can move across custody chains, time, and verification contexts, and the mark remains evaluable against a publicly checkable trust anchor. Three guarantees travel with every attestation. Authenticity: only the bound principal could have produced this mark for this artifact, or producing it without authority is detectably hard. Integrity: modification of the artifact after attestation is detectable by inspecting the mark against the artifact. Public verifiability: a third party with access to the artifact, the mark, and the trust anchor can check the binding without trusting either the signer or the receiver. The pattern is substrate-independent and predates the digital era by millennia. Wax seals on dispatches, signet rings, notarial acts under jurat, witnessed signatures, hallmarks on precious metals, holograms on banknotes, watermarks in paper, peer-review badges, audit opinions on financial statements, blockchain inclusion proofs, and modern digital signatures all instantiate the same shape: a principal, an artifact, a binding mechanism, a tamper-evidence property, a trust anchor, and a third-party-evaluable verification procedure. What changes across substrates is the binding mechanism and the anchor; the structural skeleton does not.
Broad Use¶
- Law and diplomatics: Wax seals, notarised signatures, apostilles, and witnessed wills bind a person to a document.
- Science: Citations, peer-review badges, and preregistration timestamps bind an author to a claim.
- Finance and audit: A partner-signed audit opinion attests that a stated standard was applied.
- Cryptography: Digital signatures and X.509 certificate chains bind a key-holder to data.
- Supply chains: Hallmarks on gold, certificates of origin, and pharmaceutical serialisation bind provenance to goods.
- Software: Code signing and build-provenance attestations bind a binary to its source revision.
Clarity¶
It separates the binding — this artifact, by this principal, unaltered — from everything else the artifact might be evaluated for, such as truth, fitness, or ongoing validity.
Manages Complexity¶
It collapses a catalogue of seals, signatures, certificates, and hallmarks into one object — a binding against an anchor with tamper-evidence — with one maintenance discipline focused on the anchor.
Abstract Reasoning¶
It supports a three-place model — principal bound to artifact against an anchor — whose failure modes (key compromise, anchor compromise) and recovery moves (revocation, rotation, re-attestation) are substrate-portable.
Knowledge Transfer¶
- Cryptography to audit: Transparency logs and key rotation port into firm rotation and conflict disclosure.
- Notarial practice to software: Witness requirements and register-keeping port into signed-build hygiene and key custody.
- Universally: The anchor is the standing weak point everywhere; the recurring task is to keep it uncompromised and ready to rotate.
Example¶
A notary's seal attests only that a particular person signed a particular deed on a particular date — it does not certify that the grantor owns the property or that the contents are true.
Relationships to Other Primes¶
Foundational — no parent edges in the catalog.
Children (1) — more specific cases that build on this
- Provenance decompose Attestation — The file: provenance is the multi-step CHAIN often BUILT FROM attestations (each transfer attested); attestation is the point-in-time link-level binding. Provenance is broader (a history), so this is a part-of/component relation, not a reparent of provenance.
Not to Be Confused With¶
- Attestation is not Data Integrity because attestation binds a principal to content with public verifiability against an anchor, whereas data integrity is only the bare property that content has not changed.
- Attestation is not Verification because attestation is the architecture (mark plus anchor) that makes a binding checkable, whereas verification is the act a party performs on an attestation.
- Attestation is not Provenance because attestation is a point-in-time binding of one principal to one artifact, whereas provenance is the full documented chain of custody.